---
title: "New-VBRVSAEventForwardingFilteringRule"
description: "This cmdlet creates an advanced filtering rule for Veeam Software Appliance syslog event forwarding. The rule defines the severity levels that are forwarded for a specific application or daemon and overrides the default severity rules configured..."
canonical: "https://helpcenter.veeam.com/docs/vbr/powershell/new-vbrvsaeventforwardingfilteringrule.html"
breadcrumb: "Veeam PowerShell Reference > Veeam PowerShell Reference > Backup Infrastructure > Veeam Backup & Replication Settings > Configuring Veeam Software Appliance Event Forwarding > New-VBRVSAEventForwardingFilteringRule"
dateModified: "2026-08-19"
---

# New-VBRVSAEventForwardingFilteringRule

## Short Description
Creates an advanced filtering rule for Veeam Software Appliance syslog event forwarding.

**Product Edition**: Veeam Universal License

## Syntax
```
New-VBRVSAEventForwardingFilteringRule -Application <String> -SeverityRules <VBRSyslogServerEventSeverity[]> [<CommonParameters>]
```

## Detailed Description
This cmdlet creates an advanced filtering rule for Veeam Software Appliance syslog event forwarding. The rule defines the severity levels that are forwarded for a specific application or daemon and overrides the default severity rules configured in the appliance forwarding options.

To apply the rules, save them to a variable and pass them as the `AdvancedFilters` parameter value of the [`Set-VBRVSAEventForwardingOptions`](set-vbrvsaeventforwardingoptions.md) cmdlet.

## Parameters

<table style="width:100%;" class="Blue_Table">
      <tr style="vertical-align:top">
        <th style="width:20%;">
          <p>Parameter</p>
        </th>
        <th style="width:20%;">
          <p>Description</p>
        </th>
        <th style="width:20%;">
          <p>Type</p>
        </th>
        <th style="width:10%;">
          <p>Required</p>
        </th>
        <th style="width:10%;">
          <p>Position</p>
        </th>
        <th style="width:10%;">
          <p>Accept Pipeline Input</p>
        </th>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Application</span></p>
        </td>
        <td>
          <p>Specifies the name of the application or daemon to which the rule applies.</p>
        </td>
        <td style="width:10%;">
          <p><code>String</code></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">SeverityRules</span></p>
        </td>
        <td>
          <p>Specifies an array of severity levels that the appliance will forward for the application. Accepted values:</p><ul><li><code>Emergency</code></li><li><code>Alert</code></li><li><code>Critical</code></li><li><code>Error</code></li><li><code>Warning</code></li><li><code>Notice</code></li><li><code>Informational</code></li><li><code>Debug</code></li></ul>
        </td>
        <td style="width:10%;">
          <p><code>VBRSyslogServerEventSeverity[]</code></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>False</p>
        </td>
      </tr>
    </table>

`<CommonParameters>`

This cmdlet supports Microsoft PowerShell common parameters. For more information on common parameters, see [ Microsoft Docs](https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_commonparameters?view=powershell-7).

## Output Object
[`VBRVSAEventForwardingFilteringRule`](vbrvsaeventforwardingfilteringrule.md)

## Examples

::: example
### Creating Filtering Rule for Application

This example shows how to create an advanced filtering rule that forwards only `Error` and `Critical` events for the `sshd` daemon.

```
$rule = New-VBRVSAEventForwardingFilteringRule -Application "sshd" -SeverityRules Error, Critical
```

Perform the following steps:

1. Run the `New-VBRVSAEventForwardingFilteringRule` cmdlet. Specify the following settings:

   - Specify `sshd` as the `Application` parameter value.
   - Specify `Error` and `Critical` as the `SeverityRules` parameter value.

2. Save the result to the `$rule` variable to use with other cmdlets.

:::

## Related Commands

- [`Set-VBRVSAEventForwardingFilteringRule`](set-vbrvsaeventforwardingfilteringrule.md)
- [`Set-VBRVSAEventForwardingOptions`](set-vbrvsaeventforwardingoptions.md)
- [`Export-VBRVSAEventForwardingFilteringRule`](export-vbrvsaeventforwardingfilteringrule.md)
- [`Import-VBRVSAEventForwardingFilteringRule`](import-vbrvsaeventforwardingfilteringrule.md)